2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9 | Triage

Submit
Reports

Overview

overview

Static

static

2e5238e993...d9.exe

windows7-x64

9

2e5238e993...d9.exe

windows10-2004-x64

9

Sharing

General

Target

2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9
Size

4.7MB
Sample

240522-ywry8aef8v
MD5

7554b12b1ea7540799b453368314e45a
SHA1

8f4e4cdf6a8aaea7b47b7b10a73a3c3d06dd4632
SHA256

2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9
SHA512

deefc1ed2f3c00ef2f12c44b4a7a27192a7aee73d8bcd516a02f815f699a792e558062fa2c100efe2fda663dcd1a4e04aa407610facf5fd0f2c523aecbf825cc
SSDEEP

98304:I6qPz7u5BETtVCWXESBUkT9e0WKPVVd6R61yd1UkTHU3:lq77u5KtVCWXFUkT8IVY6G1UkTHO

Score

10^/10

persistence upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9.exe

Resource

win7-20240508-en

persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9
- Size
  
  4.7MB
- MD5
  
  7554b12b1ea7540799b453368314e45a
- SHA1
  
  8f4e4cdf6a8aaea7b47b7b10a73a3c3d06dd4632
- SHA256
  
  2e5238e99393f3c3aa9b69e6355b53493a846ae5c137ab5959455a19659c73d9
- SHA512
  
  deefc1ed2f3c00ef2f12c44b4a7a27192a7aee73d8bcd516a02f815f699a792e558062fa2c100efe2fda663dcd1a4e04aa407610facf5fd0f2c523aecbf825cc
- SSDEEP
  
  98304:I6qPz7u5BETtVCWXESBUkT9e0WKPVVd6R61yd1UkTHU3:lq77u5KtVCWXFUkT8IVY6G1UkTHO
Score

9^/10

persistence upx
- UPX dump on OEP (original entry point)
- Modifies AppInit DLL entries
  persistence
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy